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Abstract. We consider a simple model of higher order, functional com- 
putations over the booleans. Then, we enrich the model in order to en- 
compass non-termination and unrecoverable errors, taken separately or 
jointly. We show that the models so defined form a lattice when ordered 
by the extensional collapse situation relation, introduced in order to com- 
pare models with respect to the amount of "intensional information" that 
they provide on computation. The proofs are carried out by exhibiting 
suitable applied A-calculi, and by exploiting the fundamental lemma of 
logical relations. 



1 Introduction 

Properties of programs are often considered as split in two categories: the ex- 
tensional properties and the intensional ones. Typical intensional properties are 
those concerning complexity issues, while typical extensional ones are those con- 
cerning input-output, observable, behaviours. This dichotomy originated from 
recursion theory: a predicate V{M) on Turing Machines is extensional if, when- 
ever it holds for a T.M. M, it holds for all the T.M. computing the same function 
as M . Otherwise, V is intensional. So, for instance, whether the computation on 
takes more or less than 100 steps is an intensional property, while undefinedness 
on is an extensional one. 

It is the intended meaning of a T.M. , namely the underlying partial recursive 
function, which determines the frontier between what is (to be considered as) 
extensional and what is (to be considered as) intensional. 

Therefore, a tentative definition of the notion of extensional property could 
be the following: a property of programs is extensional if the fact whether or not 
a program P enjoys it does affect the denotation of P; it is intensional otherwise. 

Stated this way, being extensional or intensional is a matter of the intended 
meaning of programs, and, as such, it is a relative notior0. 

The following examples, written in a call by name simply typed A-calculus 
with constants, illustrate this claim: 



^ The very same happens for the dichotomy "function vs algorithm" , which could be 
misleadingly considered as an absolute one. For instance, the well-known parallel-or 
"function" is an algorithm relatively to the model S of total objects, and a function 
relatively to the model C of partial objects, defined below. 



Example 1. The terms: 

(1) Ax:bool. true 

(2) Ax:bool. if x then true else true 

get the same interpretation in a model where the type of booleans is in- 
terpreted by the set {it,jf}, and higher types by the corresponding fmiction 
space in Set; they get different interpretations in a model that accommodates 
non-terminating computations, denoted by a suitable element ±. 

Otherwise stated, strictness is an intensional property relatively to the very 
simple, set-theoretical model, an extensional one relatively to a more sophisti- 
cated one, based on partial orders. 

The linguistic feature that forces strictness to be taken into account exten- 
sionally is anything allowing for non-termination (e.g. fixpoint operators). 

Example 2. Similarly, the terms: 

(3) Ax:bool. H 

(4) Ax:bool. if x then il else S7 

where i7 is any diverging term, get the same interpretation in the model of 
non-termination introduced above; they get different interpretations in a model 
that accommodates also errors, denoted by suitable element T. 

More examples could be provided, concerning for instance the property of lin- 
earity, or the evaluation-order dependency, but they go beyond the semantic 
analysis that we propose in the present work. 

Hence, the frontier between extensional and intensional properties is deter- 
mined essentially by the model we refer to. Nevertheless, certain features of pro- 
grams have to be taken into account extensionally by all models, namely those 
features that affect the operational behaviour of terms (for instance, strictness 
in a language allowing for non-termination). 

By the way, a fully abstract model is one that keeps implicit (i.e. intensional) 
all the properties that can be kept implicit. 

It appears that the models of simply typed A-calculi may be classified with 
respect to the amount of information on programs that they provide explicitly, 
i.e. extensionally. 

In this paper, we propose a way of performing this classification, and show 
how it works on some very basic models of higher order computation over the 
booleans. 

The basic tool used for the classification is the notion of extensional collapse 
situation. An extensional collapse situation is given by two modeltH, and a binary 
pre-logical relation between them which is a partial surjectivc function, at all 
types. In this case, the small model, i.e. the target of the surjective function, can 
be considered as what is left of the big one when some kind of computational 
behaviour (in this paper, we focus on non-termination and errors) is forbidden. 

Elements of the big model may be mapped onto the same element of the 
small one by the surjection: this is the case, for instance, of the interpretations 

^ The models considered in this paper are families of sets indexed by simple types, 
usually called type frames. 




Fig. 1. Extcnsional collapse situations. We write — i-^ N the fact that A^, 
N and the logical relation E determine an extensional collapse situation. When 
E at ground types is a canonical surjection, clear from the context, we write 



of the terms (1) and (2) above, when passing from the partially ordered model 
to the simple set-theoretic one. They may also "vanish" , since the surjection is 
partial: this is the case of the interpretation of (3) in the aprtially ordered model, 
the non-total constantly undefined function. 

In order to prove that a given pair of models Ad, TV, determines an extensional 
collapse situation, we follow the following pattern: 

— define a simply typed A-calculus , such that N is fully complete w.r.t. 

(i.e. such that all elements of TV, at all types, are definable by closed 
yl^-terms), 

— show that M \s a. model of , 

— use the fundamental lemma of logical relations (Lemma |6|) to exhibit a suit- 
able pre- logical relation, induced by A^ , and conclude. 

An interesting by-product, which is an immediate corollary of the fundamen- 
tal lemma of logical relations, is that the yl^-theory of M. is included in that of 
M. 

Wc consider the following models: 

— iS: the full type hierarchy over the set {ft, ff^. Its elements are "higher order 
boolean circuits" . 

— C: the standard model of monotonicH functions over the partial order _L< 

— £: the dual of C, i.e. the model of monotonic function over the partial order 
tt, ff < T , modelling unrecoverable errors in the absence of non-termination. 

— C: the model of monotonic functions over the lattice T < tt, ff < T , mod- 
elling non-termination and errors. 

We focus on the extcnsional collapse situations represented in Figure [TJ The A- 

^ In the general case, the morphisms of the standard model are the Scott continu- 
ous functions. Focusing on finite domains, the monotonic functions and the Scott 
continuous ones coincide. 



calculi used for proving that those are actually extensional collapse situations are 
yl'^, whose constants are true, false and if, and A'^ , the parallel extension of 
finitary PCF, due to Plotkin [T3]. It is not necessary to introduce a language , 
in order to deal with the model £0: we prove instead that £ and C are logically 
isomorphic [f], and conclude since extensional collapse situations do compose. 

The existence of an extensional collapse situation between two models Ad 
and J\f witnesses the fact that the target of the collapse is obtained by forgetting 
one (or more) computational aspect (s) that are explicitly taken into account in 
the source. 

Let us consider, for instance, the collapse of C over S, described in [S]: unsur- 
prisingly, at the ground type bool the surjection is the partial identity, undefined 
on _L. 

At first-order types, a monotonic funcion / £ Co- is surjcctcd onto the boolean 
circuit c G iScr exactly when it provides the same value as c on total tuples 
(i.e. on tuples not containing ±). Hence, / can be considered as an algorithm 
implementing c. 

We have already seen in Example [T] that there exist two implementations of 
the constantly tt function from Shooi to iSbooi, namely the strict and the non-strict 
constantly ft functions from Cbooi to Cbooi- 

To go a little further, let us consider the n-ary disjunction or„, of type 
bool — > . ■ . bool bool, yielding the result ft whenever at least one of the 

n times 

arguments is tt and ff if all the arguments arc ff. 

They can be implemented in several ways, ranging from the most lazy (and 
parallel) algorithm yielding the result ft whenever at least one of the arguments 
is ft, to the most eager one, yielding the result tt whenever all the argument are 
different from ±, and at least one of them is ft. 

In the case n = 2, this gives four different implementations of the disjunction, 
which are usually named, from the laziest to the most eager, parallel-or, left- 
or,right-or and strict-or. 

In the general case, it is not difficult to realise that the algorithms implement- 
ing or„ form a lattice whose size grows exponentially in n. The laziest algorithm, 
is the bottom, and the most eager is the top of the lattice. 

Summing up, and generalising, we have that for all types cr, and all boolean 
functionals f G S^, the set of implementations of / is a sub cpo of C^, called the 
totality class of /, which is a lattice. 

Hence, the model S is obtained by collapsing C via the totality relation; in 
the same way C is obtained by collapsing C via the "error-freedom" relation, 
which, at ground type, is the partial identity function, undefined on T. 



* could be defined as the dual of A'' with respect to the inversion of _L and T. 
® i.e. that they form an extensional collapse situation in either way. 



1.1 Related works 



In the literature, a model of the simply typed A-calculus is called extensional if 
all its elements, at all types, are invariant with respect to the logical relation 
defined as the identity at ground typefl 

When a model is not extensional, its extensional collapse is performed by 
eliminating the non-invariant elements. The result is an extensional model. 

This pattern has been followed , for instance, for game models |1I10| . or 
models obtained by sequentiality relations |14lll| . 

Sometimes, the resulting extensional model happens to have been defined 
and studied independently: those are instances of what we call here extensional 
collapse situation. 

ExamplcfO of this kind are: 

— sequential algorithms collapsing on strongly stable functions [5]. 

— the relational model collapsing on Scott-continuous functions (between com- 
plete lattices) [7|- 

Nevertheless, extensional collapse situations as defined in the present paper cover 
a broader landscape than these extensional collapses. The essential difference 
is that the extensional collapse of a model is, by definition, unique, whereas 
different extensional collapse situations may concern a given model (as it is the 
case of the lattice model £, which collapses over C, f , and S). Even choosing two 
particular models A4 and A/", there can be more than one extensional collapse 
situation between them. For instance, an extensional collapse situation between 
<S and C has already been showed in [5], using the totality logical relation. The 
use of the language and of the associated (canonical) pre-logical relation 
provides a different partial surjection between those two models, and, by the 
way, makes the proof presented here easier. 

Extensional collapse situations, defined in a slightly different way, have been 
used in [5] for constructing, given two models , A/" of a given applied A-calculus, 
a quotient model M./N whose theory is a super-set of both Th(A^) and Th(A/'). 

2 Logical versus pre-logical relations 

Logical relations have been introduced by Plotkin in [H] , in order to characterize 
A-definability in the full type hierarchy. The main features of logical relations 
are: 

— they contain all the tuples of the form (|[M|, . . . , |[M|), where M is a closed, 
simply typed A-term. This is known as "the fundamental property" of logical 
relations. 

® Otherwise stated: Vcr, t, f, g : a ^ t ii\/x £ a f{x) = g{x) then f = g. 

'' It has to be noticed that in these examples the collapse is not a logical relation. It 
is defined as a categorical notion, independently from the hierarchy of simple types 
and obviously instantiating to an extensional collapse situation in the sense defined 
in this paper. 



— they are completely determined by their behaviour at ground types. Hence, 
defining a logical relation boils down to specify it at ground types. 

The main drawback of logical relations, from our point of view at least, is that 
they are not closed under (relational) composition; actually, the property stated 
in the second item above is incompatible with the closure under composition. 
In [S], Honsell and Sannella define pre-logical relations, as a weakening of the 
notion of logical relation which enjoy the fundamental property and is closed 
under (relational) composition. The price to pay is that pre-logical relation are 
not determined by their behaviour at ground types, and that they are language- 
dependent: at higher-types, pre-logical relations have to obey a closure condition 
which depends from the specific simply typed A-calculus A one is interested in 

B 

Nevertheless, pre-logical relations are very well adapted to our framework: in 
general, we will prove the existence of an extensional collapse situation A4 — J\f 
by exhibiting a A-calculus , with respect to which Af is fully complete. In 
such a situation, if is a model of , the relation {(1^1^, IPI ) | P G 
(yl^)°}crgTypes IS a partial surjective function at all types, and it is a yl-^-pre- 
logical relation (which is not logical in general). 

We want to be able to compose such pre-logical relations. Of course, the 
composition of relations which are partial surjective functions is a partial surjec- 
tive function. Moreover, we know that, given a simply typed A-calculus A, the 
composition of two /l-prc-logical relations is A-prc logical [9]. 

The point here is that we will compose relations which are pre-logical rel- 
atively to different A-calculi: the set of constants of A-^ will of course depend 
on Af. Nevertheless, when composing a yl-^-pre-logical relation and a A-^ -pre- 
logical relation, one gets a yl-pre-logical relation for any language A which is 
a sub-language of both A-'^ and yl-^lj. Hence, we consider the poorest possible 
language, namely the simply typed A-calculus without constants, over a given set 
of ground types (for our purposes, a unique ground type bool is enough), call it 
A, and define extensional collapse situations as yl-pre-logical relations which are 
partial surjctive functions at all types. 

It has to be noticed that logical relations are, a fortiori, yl-pre-logical. Hence 
the composition of two logical relations, which is not logical in general, is vl-pre- 
logical. 

So, in general, we can exhibit different extensional collapse situations between 
two given models. Let us consider again, for instance, the case of C and S. We 
will see in Section |3] that the simply typed A calculus equipped with the ground 
boolean constants true and false and the first-order constant if, noted A'^ , 
determines, following the lines described above, an extensional collapse situation 
C — S, which is different from the totality collapse described in Section [TJ 
For instance, the parallel-or function is related to the binary disjunction in the 

* Moreover, just like logical relations, they have to be closed with respect to the 

interpretations of the constants of A. 
® This is an immediate consequence of the definition of pre-logical relations and of 

proposition [T] 



totality collapse, but not in E, since no term of defines the parallel-or (by 
the way, the three "sequential" disjunctions strict-or, Icft-or and right-or are 
yl'^-definable). 

3 Type frames, logical and pre-logical relations 

Since all the models considered in this paper are extensional, we provide here a 
very simple definition of type frame, where higher types are interpreted by sets 
of function^^ 

The set of simple types over a set K of ground type constants is the smallest 
set containing K and closed w.r.t. the operation cr, r i— > cr — > r. 

Definition 1. A type frame A4 over a set K of ground types is a family of sets 

indexed by simple types over K , such that 

Ma-^T {f \ f is o- function from Ai^ to Air}- 

A type frame is finite if all the sets of the family are finite sets. 

When Ma^T = M^' , the type frame is full. 

Definition 2. Given two type frames M and Af over K , a binary logical rela- 
tion R between A4 andJ\f is a family of binary relations R^- C xAf^, indexed 
by simple types over K , such that, for all a,T, f £ AA^^r, 9 £ J^a^r ■ 

(/,.9) e ^a^T ^ [Vx e Ma,y eM^ [{x,y) e R<x ^ {f {x),g{y)) e R^]] 

For defining pre-logical relation, we use the notion of environment-based 
interpretation of the typed A-calculus in type frames, which will be introduced 
in Section 01 In the following definition, let A be the simply typed A-calculus, 
without constants, over a set K of ground types. 

Definition 3. A binary pre-logical relation R between Ai and M is a family of 
binary relations Ro- C A4a x J\f^, indexed by simple types over K , such that: 

- for all a,Tj £ Ma^r,9 e JV^^r: {f,g) e R^^r => [Va- G M^^y e 

J^a [ix,y) eR, ^ {f{x),giy)) eRr]] 
~ Given: 

• P £ At, for any type t, 

• a Ai- environment p and a J\f -environment p' such that, for all types S 
and variable x : 6, {p(x),p'{x)) G Rs, 

• a variable z : a , for any type a, 
the following holds: 

Ma,b) G R. m^z:=a]m%:=b]) ^ ^r] ^ (lAz. A/f^ , [Az.Ml^) G R.^. 

It is easy to see that any logical relation is pre-logical. We are interested in a 
particular kind of pre-logical relations: 

In section [6] we provide the more general definition, encompassing non extensional 
models. 



Definition 4. A binary pre-logical relation R between two type frames M. and 
Af over K is a pre-logical surjection if: 

— at all types, R is surjective: Vct Vy G Afa 3a; G Ad^ {x, y) G Ro- 

— at all types, R is a partial function: Vcr Va; G Ma Vy, y' G Ha {x, y), (x, y') G 

^ y = ?/' 

Lemma 1. A binary pre-logical relation between AA and Af which is a partial 
function at ground types and surjective at all types is a pre-logical surjection. 

Proof. Straightforward, by induction on types. The extensionality of Af is re- 
quired here. 

Definition 5. An cxtensional collapse situation is a triple AA,N,^, where A4 
and Af are type frames over a given set K of ground types and E is a pre-logical 
surjection from A4 to Af. 

We note A4 Af the fact that A4,Af,'E is an cxtensional collapse situation. 

Extensional collapse situations are closed under composition, in the following 
sense: 

Proposition 1 ([9], Prop. 5.5). If A4 -^^ Af and Af V then Ad V , 

where (F o E)„ = F^ oE^. 

Hence, the set of type frames over a given set K of ground types is prc-ordered 
by the relation Af < Ai ^ A4 — >^ N , for some E. Let = denote the equivalence 
relation associated to this pre-order. 

We call pre-logical isomorphism a pre-logical relation E such that both E and 
E""'^ are pre-logical surjections. 

3.1 Type frames over bool 

In order to define the type frames we are interested in, let us introduce the 
following notation: if A and B are sets (resp. partially ordered sets), A => B 
(resp. A =>m B) denotes the set of all the functions from A io B (resp. the 
partially ordered set of monotonic functions from AtoB, ordered pointwise). 

Wc consider four type frames over a single ground type bool: S, C, E and £, 
defined as follows: 



— • 


^bool 


= 


• 


ga-,T 




— • 


^bool . 


= {-L, ft, if}, partially ordered by _L< ft, ff , 


• 


Qa^T 


C ^ 771 ^ ■ 


— • 


^bool 


= {ft, if, T}, partially ordered hy tt,ff < T, 


• 


^a~^T 




— • 


^bool 


= {±, it, ff, T}, partially ordered by ±< tt,ff<T, 


• 


Qa^r 





The type frames C and E are dual. We show that C = £ by exhibiting a 
pre-logical isomorphism. 



Proposition 2. The logical relation E between C and £ defined by Ebooi = 
{(ft, tt), {Jf, ff), (_L, T)} is a pre-logical isomorphism. 



Sketch of the proof. First of all, the relation defined above is logical, hence, a 
fortiori, pre-logical. In order to show that it is a pre-logical isomorphism, one 
can prove by simultaneous induction on types, the following statements: 

(la) Eg. is a bijection. 

(ii„) V(x,2/), {x',y') £ E„ {x < x' y' < y). 
4 Applied A-calculi 

The type frames introduced in the previous section are models of simply typed 
A-calculi endowed with constants, called applied A-calculi: 

Definition 6. Given a set K of ground types, an applied A-calculus A over K 
is given by a family of typed constants C{A)„, indexed by simple types over K . 

The terms of the calculus are simply typed X-terms built by application and 
X-abstraction starting from the typed constants and variables. 

The operational semantics of an applied X-calculus is specified by a set of 
5-rules, stipulating the behaviour of the constants, and by the /3-rule. 

As a matter of notation, we will write (resp. A'^) for the set of terms (resp. 
closed terms) of type a. 

The usual, environment based, interpretation of an applied A-calculus in a 
type frame A4, given a suitable map C from the constants of the calculus to 
elements of the appropriate type, is defined as follows: 

The interpretation of a closed term P will be noted simply or |[P|, when 

non ambiguous. 

Two conditions have to be satisfied for a type frame 7W to be a model of a 
given applied A-calculus: 

1. In the fourth item of the definition above, one has that the function d G 
Ma >-> is element of M^^t, for the appropriate type r. 

2. The map C is sound: for any (5-rulc P -^^ Q, one has JPJ^ — \Q\^ ■ 

When these conditions are satisfied, the model is such that P — Q =J> 
|[P|^ = IQJ^, where the rewriting relation is the contextual closure of 
U 

Note that, for the type frames S,C,£ and C, the first condition is always 
satisfied, since for all of them \a — >• t| is the exponential object \t^''^ in some 
Cartesian closed category (actually there exists a ccc which is an ambient cate- 
gory for all those type frames, namely the category of finite partial orders and 



monotone functions). Hence, in order to show that a given type frame among 
S,C,£ and >C is a model of a given apphed A-calculus, it is sufficient to provide a 
sound interpretation of the constants of the language. 

Among the models of a given applied A-calculus, the fully complete ones are 
those whose elements are definable (in general, one asks for the definability of 
finite elements. We skip this condition here since we focus on finite type frames). 

Definition 7. A model Ai of an applied X-calculus A is fully complete if for 
all a and for all d G Ma there exists a closed A-term D of type a such that 

i^r = d. 

We define now the applied A-calculi that will be used in the sequel to prove 
some extcnsional collapse situations. 

Wc call these calculi A^ and A'^ respectively, to emphasise the full complete- 
ness of the corresponding type frames. 



4.1 The basic boolean calculus 

Here is the definition of the constants of A'^ and of their operational semantics: 
Definition 8. — C(yl'^)booi = {true, false} 

^ C'(^'^)bool— >bool— ^bool— ^bool ^ 

{if} 

- if true M N M, if false M N N 
Lemma 2. S is a fully complete model of A'^ . 

Sketch of the proof. First of all, the interpretation mapping the ground constants 
on the corresponding boolean values and such that |[if J'^rf e ./ = 

is clearly sound, hence 5 is a model of A'^ . 

Concerning full completeness : consider an element / = {(ai, &i), . . . , (a„, &„)} G 
Sa^T- If the tti, the bj and the equality predicate on Sa were '^-definable, then 
it would be easy to write down a yl'^-term defining /, as a sequence of nested 
if. 

On the other hand, one can yl'^-define the equality predicate on S^-^r if one 
is able to define the elements of So- and the equality predicate on St- 

Hence, the proof consists in a straightforward simultaneous induction on 
types, for the two following properties: 

DEF(ct): all the elements of arc yl'^-definable. 

EQ(ct): the equality predicate on Sa is yl*^- definable. 

By the way, EQ(bool) is provided by the term 

Ax:bool y:bool. if x (if y true false) (if y false true). 

Let P(cr) = Ve e Sa3P E A^l iPjS = e, 



iid 

if d: 



it 



Lemma 3. C and E are models of A^ . 



Proof. The ground constants true and false are interpreted by the correspond- 
ing booleans, in both models. Here is the interpretation of the constant if in 
the two models: 

{e iid = it (eiid = 1t 

f iid = ff [if f d ef=lf iid = ff 
_L otherwise [ T otherwise 

these interpretations clearly validate the (5-rules concerning if. 

4.2 Adding non-termination 

Non-termination can be added to the basic calculus by means of fixpoint combi- 
nators, for instance. Nevertheless, a single new constant Q : bool, whose intended 
interpretation is the undefined boolean value _L is enough. In fact, fixpoint com- 
binators do not add expressive power in the case of finite ground types, apart 
from the possibility of divergence. In order to achieve the full completeness of C, 
we add a parellel-or constant to the language, following Plotkin [T5] . 
is the extension of defined as follows: 

Definition 9. Vcr C{A^)a C C{A^)a and: 

-fie C(yl'^)booi 

— C(yl'')bool^bool^bool = {P°r} 

— por true AI — true, por AI true -^^ true 

— por false false — false 

Lemma 4. C is a fully complete model of AS' . 

Proof. This is a corollary of Plotkin's proof of full abstraction of the Scott model 
of parallel PCF [13]. 

Lemma 5. L is a model of /S . 

Proof. The ground constants true and false and fl arc interpreted by ft, ff 
and _L respectively. Here there are the interpretations of if and por in L: 



[if f d e / = 



_L 


if d 


=± 


e 


if d 


= ft 


/ 


if d 


= f! 


T 


if d 


= T 



[por|^d e = {ft I d > ft or e > ft} V {jj I d > if and e > ff}} 
Otherwise stated, the interpretation of por in C, is given by the following 
truth table: 



por 


_L 


ff 


ft 


T 


± 


_L 


_L 


ft 


ft 


a 


_L 


ff 


ft 


T 


ft 


ft 


ft 


ft 


ft 


T 


ft 


T 


ft 


T 



This interpretation validates the J-rules concerning if and por. 
Notice that the interpretation of the parallel-or constant in C given above is 
the only one which is sound with respect to the (5-rules of por. Actually: 
ft = [truel^ = |por true = |[por|^ftT 

5 Extensional Collapse Situations 

In this section, we prove the six extensional collapse situations exhibited in 
Figure [1] An effective way of providing an extensional collapse situation M. — 
N, is to define an applied A-calculus A'^ such that A/" is a fully complete model 
of , and is a model of A'^ ; then full completeness may be used to exhibit 
a suitable pre-logical surjection. The key fact is expressed by the fundamental 
lemma of (pre-)logical relations below: 

Lemma 6 ([9], Lemma 4.1). If A4, N are models of an applied \-calculus A, 
and E is a pre-logical relation between M. and Af, such that for all constants c : a 
of A, ([cl^, \cY) € E,,, then, for all types a and for all P € ([^1^, [^1"^) e 

Corollary 1. Let A4, Af be type frames over K , and suppose that there exists 
an applied \- calculus A such that Af is fully complete for A. 

Then there exist a pre-logical surjection E such that A4 -^^ M . 

Proof Define E, = {{\P\^ , \Pf) \ P G A^}. 

As shown in [9], Exemple 3.7, this is a pre logical relation. 

We have to prove that Eg- is a partial surjective function, for all a. For ground 
types, the statement holds by full completeness of N, under the hypothesis that 
different ground constants of A are not identified in M, that we take for granted. 

By using Lemma [T] we are left with proving that E is surjective at higher 
types, and this is guaranteed by the full completeness of N . 

Given an applied A-calculus A and one of its models M, let Th'^iM) = {P = 
Q\P,QeA°and = M^} ■ 

Corollary 2. Let A4 andAf be models of an applied X- calculus A, and M — Af 
be an extensional collapse situation. If, for all constants c : a of A, (|]c|^, |]c]]''^) G 
E„, then Th'^iAA) C Th'^iAf). 

Proof. Let us suppose that — IQI'^, for two given closed yl-terms P and 

Q. By lemmalwe have that (1^1^, [P]-^), (IQl^, [Ql"^) e E^. Since E„ is a 
function, we conclude that jPf^ = IQf^. 

Here is our main result: 

Proposition 3. The following extensional collapse situations do hold: 
C^S,£^S,C^£,£^C,C^C,C^£. 



Proof. — C ^ S and £ — s- 5 follow from Corollary [TJ where the applied A- 
calculus is , and Lemmas [21 

— C — J- £ and £ C follow from Proposition [5] 

— £ — > C follows from Corollary [TJ where the the applied A-calculus is , and 
Lemmas [H [5] 

— £ — >■ £ follows from the two items above and Proposition [1] 

Note that, by composition of extensional collapse situations, we obtain C — >■ 

S. 

By Corollary [21 the proposition above yields in particular: 

Corollary 3. - Th^"" (C) C Th'^'' (5) 

— Tl/''(/:) C Th'^^(C) 

The examples presented in Section [I] show that the inclusions above are strict. 
6 Conclusion and further work 

We have provided a general definition of "inclusion" of models of higher order, 
functional computations via the notion of extensional collapse situation, and 
shown this notion at work on some simple models over bool. 

As suggested by the title, this work should be considered as a first step 
settling the ground for the study of extensional collapse situations on more 
complicated models. As a matter of fact, the definitions of section [Hj have to 
be generalised a bit to encompass non extensional models. In particular, if C is a 
Cartesian closed category without enough points, the corresponding type frame 
Ccr is defined by: 

— Cbooi = C(l, Cbooi) for a suitable object Cbooi 

and, given / G Co-^t and x £ C^r, one defines f{x) = evo </, x>. 

Then, the fundamental lemma [6] holds and the construction of extensional 
collapse situations via applied A-calculi goes through. This generalisation of log- 
ical relations for categories without enough points is described for instance in 
[5], section 4.5. 

Let us introduce a direction for further work via an example, referring to the 
ones showed in the introduction. The terms: 
Ax: bool. x 

Ax: bool. if x then x else x 

get the same interpretation in all the models considered in the present paper. 
They get different interpretation, for instanc{|3, in the model TZ of set and 
relations 0, endowed with the finite multiset exponential (see for instance [4] 
for a direct description of that model as a Cartesian closed category). 

Actually, these terms get different interpretations in all models for which linearity 
is an extensional property. This character of the model is often termed "resource 
sensitivity" . 



Using Ehrhard's result on the extension collapse of TZ over £ [7], we should 
obtain the following chain of extensional collapse situations: 
S <C = £ <C<TZ 

An interesting sub-problem is the definition of an extension of (finitary) PCF 
w.r.t. which C is fully complete. 

What comes after? More intcnsional models, like game models, could collapse 
over TZ. Also, where is the place of models based on stable orderings, as the stable 
or strongly stable ones, in this hierarchy? 

We already know some partial answer (for instance, the fact that Berry and 
Curien's sequential algorithms collapse over the model of strongly stable func- 
tions [6]). 

Quite a number of different models of higher order, functional computation 
exist in literature. 

Having a better overview of the poset of extensional collapse situations relat- 
ing these models may contribute to a better understanding of the whole picture. 



Acknowledgments. Thanks to an anonymous referee of a previous version of 
this work, for suggesting that pre-logical relations are the proper framework to 
deal with extensional collapse situations. 
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